CVE Details for CVE: CVE-2016-5655
Summary
Misys FusionCapital Opics Plus does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to obtain sensitive information via a crafted certificate.
| Timestamps | |
|---|---|
| Last major update | 28-11-2016 - 20:28 |
| Published | 19-07-2016 - 22:59 |
| Last modified | 28-11-2016 - 20:28 |
CWE
CVSS
Base
4.3
Impact
2.9
Exploitability
8.6
Access
| Vector | Complexity | Authentication |
|---|---|---|
| NETWORK | MEDIUM | NONE |
Impact
| Confidentiality | Integrity | Availability |
|---|---|---|
| PARTIAL | NONE | NONE |
CVSS3
Base
5.9
Impact
3.6
Exploitability
2.2
Access
| Attack Complexity | Attack vector | Privileges Required | Scope | User Interaction |
|---|---|---|---|---|
| HIGH | NETWORK | NONE | UNCHANGED | NONE |
Impact
| Confidentiality | Integrity | Availability |
|---|---|---|
| HIGH | NONE | NONE |